Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
File:                     pOcgX11BJXpruV-QDuwKESPnUWQ.mft (raw, json)
Hash identifier:          8Ji6Eyn7uuLmxRO/ElTFrS0bIC/x9UgzLSch2j94J7s=
Subject key identifier:   F6:B7:44:67:98:9A:E7:16:AB:3B:78:69:7A:65:2F:66:9F:C0:C7:76
Authority key identifier: A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
Certificate issuer:       /CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Certificate serial:       019CAED9D614B891A24C97098F9B7E858C83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
Manifest number:          185F
Signing time:             Mon 02 Mar 2026 14:00:37 +0000
Manifest this update:     Mon 02 Mar 2026 14:00:37 +0000
Manifest next update:     Tue 03 Mar 2026 14:00:37 +0000
Files and hashes:         1: 75usjphnflTK9ekaeXTmIOUK9No.roa (hash: 6EuKwuh4YvgBCa5Zr1EQEmvX8bawaDXoEyNUirI2tqE=)
                          2: BYJeOMTp9VHrWuoMjPnGgfKwrc0.roa (hash: BFrY9/6iplAYN4CNa21BmE/m83H1ufk5TI5FpOMq62I=)
                          3: OhtO9gQuXsBPS-Q3O3FN8E4x348.roa (hash: o+Nr9wOEwTpH2Y6JMdDgtincCGDhZv31TNiZL0Hk3Bs=)
                          4: fEY123WrG17ZCUyz9dcKnTc2Qkc.roa (hash: ehi6sBGZP2OSU+JX6wLoNRrh9WIbrRaxXboak3XDqVc=)
                          5: pOcgX11BJXpruV-QDuwKESPnUWQ.crl (hash: 6D1zXy5I+KmRQtkuGltFRTtouehFxv9u/py21XqFPns=)
                          6: xJFI4mrIs8uN5TlhHVLxpsA2hsU.roa (hash: 7LWb0I2IanjDr9ngdvZoV0Vpn7u1mnQr4dTehW6hxdQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 14:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:d9:d6:14:b8:91:a2:4c:97:09:8f:9b:7e:85:8c:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
        Validity
            Not Before: Mar  2 14:00:37 2026 GMT
            Not After : Mar  3 14:00:37 2026 GMT
        Subject: CN=f6b74467989ae716ab3b78697a652f669fc0c776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d0:ce:51:a8:47:3f:cd:af:39:cb:11:82:e3:
                    42:b6:c7:07:49:d8:c9:ed:57:d3:3d:16:81:83:65:
                    21:18:eb:30:fd:b7:50:71:ed:45:21:ae:8b:b7:83:
                    bb:73:6d:ac:f1:64:ce:2e:18:9d:09:a0:5f:4a:9e:
                    8b:05:5e:cd:c2:2b:58:c3:a1:ab:6c:4b:8a:f2:42:
                    2e:91:c8:74:37:49:80:a3:1c:ed:42:3c:84:d1:2f:
                    4e:8f:2d:64:93:ea:e5:e9:0f:65:66:25:bd:0b:34:
                    72:fd:da:3b:46:9d:78:94:a1:ef:39:68:26:59:fd:
                    01:51:ce:35:0f:c4:07:1f:eb:42:28:c2:c5:b4:15:
                    f7:ed:d4:46:4c:db:06:43:ca:dd:2d:85:ca:aa:e0:
                    60:45:cc:35:49:5c:8d:9b:9f:42:f8:47:7f:89:ce:
                    b4:aa:62:91:2d:90:b7:17:2a:b5:cd:00:35:88:52:
                    56:e6:c8:b3:63:23:b8:76:3c:7f:70:5b:a6:c7:73:
                    50:e1:1b:05:79:7c:33:f2:2f:42:2b:c9:c0:2d:6c:
                    d4:14:f5:7e:3a:93:2d:f3:d6:26:b3:12:dd:52:2b:
                    0b:fa:49:5d:b4:bb:cf:40:69:21:b0:fc:57:c2:3d:
                    5b:46:8e:03:0a:58:78:3c:44:98:99:02:27:73:b9:
                    75:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B7:44:67:98:9A:E7:16:AB:3B:78:69:7A:65:2F:66:9F:C0:C7:76
            X509v3 Authority Key Identifier:
                keyid:A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:65:2e:c6:9a:9c:2a:ee:ed:80:e3:10:42:7f:df:80:5d:df:
         5a:49:88:d7:99:c2:f0:d8:73:ca:6c:ed:64:6e:ff:4c:51:a6:
         e9:f4:5e:e4:eb:5f:60:5a:b0:c2:0f:68:03:1a:38:63:0b:63:
         4c:2c:d4:58:20:2e:6a:8e:b4:ea:e6:3c:e2:d3:ab:5e:9f:e1:
         e4:cc:bb:f3:c0:fa:af:16:68:a3:53:13:33:82:fc:20:b8:88:
         37:ea:f4:58:14:64:f6:ed:c5:52:93:d5:54:21:c0:db:56:60:
         01:64:8d:07:2f:a7:9d:30:32:70:b4:ef:93:66:51:94:fd:77:
         ca:57:11:d8:9c:4f:a1:b3:f6:58:b2:76:f6:d4:eb:64:ae:a0:
         18:69:20:e3:86:d7:ec:47:f5:e1:44:ec:f5:b4:c9:6d:99:7c:
         f8:fa:a7:eb:d8:a1:a8:db:b3:59:60:da:1e:b8:4d:64:09:b2:
         41:2e:f5:00:d8:36:8b:47:57:19:51:a6:13:96:e5:51:1d:e8:
         74:3e:3b:20:6b:0a:f0:42:ed:f6:5b:fc:9a:a3:a1:a8:45:a1:
         60:34:36:23:0f:9c:3c:1f:0c:89:e2:d1:9d:7d:f8:c8:79:53:
         83:2d:1f:e5:a9:88:a7:fa:27:ab:52:b6:7f:12:0c:08:67:f3:
         25:a0:70:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:08:26 2026 by rpki-client